Annalect interview question

How do you secure your API Gateway ?